I have an issue using user_enabled_emulation with my LDAP solution.

I set:

user_tree_dn = ou=Users,o=UCO
user_objectclass = inetOrgPerson
user_id_attribute = uid
user_name_attribute = uid

user_enabled_emulation = true
user_enabled_emulation_dn = cn=Users,ou=Groups,o=UCO
user_enabled_emulation_use_group_config = true

group_tree_dn = ou=Groups,o=UCO
group_objectclass = posixGroup
group_id_attribute = cn
group_name_attribute = cn
group_member_attribute = memberUid
group_members_are_ids = true

Keystone properly lists members of the Users group but they all remain disabled.

Did I misinterpret something?

Kind regards,

Radek